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Abstract 

We generalize the framework of virtual substitution for real quanti¬ 
fier elimination to arbitrary but bounded degrees. We make explicit the 
representation of test points in elimination sets using roots of parametric 
univariate polynomials described by Thom codes. Our approach follows 
an early suggestion by Weispfenning, which has never been carried out ex¬ 
plicitly. Inspired by virtual substitution for linear formulas, we show how 
to systematically construct elimination sets containing only test points 
representing lower bounds. 


1 Introduction 

After Tarski’s seminal paper |23j there has been considerable research on quan¬ 
tifier elimination for real closed fields. One research line lead to complexity 
results and asymptotically fast algorithms [n unusual. Unfortunately, these 
algorithms turned out not to be feasible in practice m- 

From a practical point of view, the invention of quantifier elimination by 
cylindrical algebraic decomposition (CAD) was an important step [B]. Several 
enhancements dUH] of the original procedure combined with an efficient im¬ 
plementation |3] made it possible to apply CAD-based algorithms to real-world 
problems to some extent m- One principal drawback of all CAD-based al¬ 
gorithms is the fact that parameters significantly contribute to the theoretical 
complexity [^. 

Virtual substitution is an alternative approach, particularly strong for for¬ 
mulas with low degrees of the quantified variables, which is not sensitive to 
the number of parameters. Similarly to CAD there exist efficient implementa¬ 
tions [H]. The original description of the method as well as first improvements 
and implementations were limited to linear formulas Eiini- The next im¬ 
portant step focused on formulas up to total degree two of the quantified vari¬ 
ables m- That publication furthermore suggested in a very abstract way to 
extend the procedure to arbitrarily large degree bounds, and mentioned Thom’s 
lemma |B] as a possibility for distinguishing real polynomial roots. In another 
publication Weispfenning made precise how to perform virtual substitution up 
to degree three, without using Thom codes, however |26j . 
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Recently, virtual substitution has been playing some role in satisfiability 
modulo theory solving mm- There appears to be considerable interest in higher 
degrees m, focusing on the software aspect rather than on theoretical founda¬ 
tions. 

The present work picks up the original idea of Thom codes for generalizing 
virtual substitution to arbitrary but fixed degree bounds, developing theoreti¬ 
cally precise foundations and a rigorous framework. Our original contributions 
are the following: 

1. We describe an encoding of parametric polynomial roots based on Thom’s 
lemma. We prove that this encoding uniquely determines a root of a 
parametric univariate polynomial. 

2. For a given encoding we specify formal necessary and sufficient conditions 
for the existence of a corresponding root. This allows to discard redundant 
elimination terms. 

3. Our encoding allows to easily identify roots representing lower in contrast 
to upper bounds of relevant intervals. 

4. We generally reduce the size of elimination sets by considering exclusively 
lower bounds of relevant intervals. This improves even the well-known 
elimination sets for the quadratic case. 

The plan of the paper is as follows: In Section we describe our root en¬ 
coding based on Thom’s lemma. In Section we introduce our framework by 
specifying what elimination terms look like and how they are substituted. We 
prove the correctness of the framework. In Section]^ we reduce the size of elim¬ 
ination sets by considering exclusively lower bounds of relevant intervals. In 
Section we discuss our framework in the context of alternative approaches in 
the literature. We furthermore point at its compatibility with various general¬ 
izations of quantifier elimination by virtual substitution. In Section]^ we discuss 
practical issues related to possible implementation strategies. 

2 Parametric Roots 

Let p G Zfyi,..., N with degp = n, and let ai, ..., ttm € M. Denote 
by (oi,..., am) ■ 2[yi, • ■ ■, y-m] K the evaluation homomorphism in postfix 
notation, i.e., we have p{ai,... ,am) G K[a;]. Consider arbitrary / G K[a:]. For 
^ G K we define the sign sequence of length fc at ^ as follows: 

sgn^(/, A) = (sgn(/(C)),sgn(/'( 0 ), ■ •. 

A sign sequence s = (si,..., s„) G {—1,0,1}” is consistent with p if there exist 
Oi, ..., am, ^ G R such that the following conditions hold: 

(Cl) degp(ai ,..., > 0, 

(C 2 ) p{ai,.. .,am){0 = 0 > 

(C 3 ) sgn^(p(Q:i,..., amY, n) = s. 
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s 

r(p,s) 

/ 

(-1,-1) 

a < 0 A 4ac - 6^ < 0 

—x"^ + x 

(-1,0) 

a = 0 A b < 0 

— X + 1 

(-1,1) 

a > 0 A 4ac — b^ < 0 

x^ — Sx + 2 

(0,-1) 

a < 0 A 4ac — b^ = 0 

—x"^ -1- 2a: — 1 

(0,1) 

a > 0 A 4ac — b^ = 0 

x'^ — 2x +1 

(1,-1) 

a < 0 A 4ac — b^ < 0 

—x'^ -1- 3a; -1- 2 

(1,0) 

a = 0 A b > 0 

X — 1 

(1,1) 

a > 0 A 4ac - 6^ < 0 

9 

X — X 

Table 1: 

Consistent sign sequences and guards 


It follows that (0,..., 0) is not consistent with any q G Z[yi,..., ym][x\. The 
idea is that s uniquely describes a real root ^ of p{ai ,..., am)- 

A guard T{p,s) for p and s = (si,..., s„) G {—1, 0,1}" is a quantifier-free 
equivalent in variables yi, ..., ym of the Tarski formula 


where 


3x(p= 0 A /\{p^"^ cr(si) 0)^, 

i=l 

P‘<” ifs, = -l, 
<y{s^) = < “=” if s* = 0, 

[“>” ifSi = l. 


Lemma 1. Let p G Z[ 2 /i,... ,ym][x\ with degp = n > 0. Let s yf (0,..., 0) be a 
sign sequence of length n, and let oi, ..., am G R- The following are equivalent: 


(i) r(p, s) holds for ai, ..., Q 

(ii) There exists a unique ^ G 


such that conditions |(Ci) - (C 3 ) hold. 


Proof. Assume (i). It is easy to see that there exists ^ G ffi such that (C 2 ) and 
1 ( 03)1 hold. Denote p{ai ,..., am) by Pa- Then s yf (0,..., 0) implies that at 
least one of polynomials p'^, ..., p^\ is not identically zero. Hence, Pa is of 
positive degree, i.e., (Ci) holds as well. The uniqueness of ^ follows directly 
from Thom’s little lemma [3]. 

Assume (ii). Then it is easy to see that ai, ... 
a unique x. 


satisfy T{p, s), even with 
□ 


Lemma ensures that s yf (0,...,0) is consistent with p if and only if 
r(p, s) is satisfiable. In the positive case, r(p, s) gives a necessary and sufficient 
condition for p to have a root that is described by s. 

As an example consider p = ax'^ + bx + c. Table [l] lists all sign sequences 
consistent with p along with their respective guards. The polynomials / in 
the table are obtained from p by substituting for a, b, and c suitable values 
satisfying the corresponding condition r(p, s) in the table. They all have 1 as a 
root described by the corresponding s, formally, sgn;^(/', 2 ) = s. 

Let s be consistent with p. We call the pair (p, s) a parametric root of p. 
Recall from the definition of consistency of s with p that there are particular 
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ai, ..., am G K such that s uniquely describes a real root of p(ai,..., am}- 
Note that these ai, ..., am G K need not be unique. The possible choices for 
ai, ..., am are in fact described by r(p, s). 

The following lemma considers two such possible choices, and states that 
the signs of the obtained univariate polynomials in the neighborhoods of the 
corresponding roots are invariant with respect to the two choices. 


Lemma 2. Let p G Z[yi, ..., 2/m][a;] with degp = n > 0. Let s = (si,..., s„) 
be consistent with p, where Oi, . .., am, C G R, and /3i, ..., /Hm, C ^ R are 
two possible sets of choices in (Ci)f (C3) Denote p{ai,. ■ ■ ,am) by Pa, and 
p(/3i,..., Pm) by pp. Let £ be a positive infinitesimal number. Then the follow¬ 
ing hold: 


(i) sgn(p„(^ - £)) = sgn(p^(C - £)) 


(ii) sgn(p„(^ -h £)) = sgn(p^(C -f £)). 

Proof. We show only (i), the proof of (ii) is similar. To start with, note that 


sg^i{Pa,n) = sgn^(p( 3 , n) = s. (1) 

We show by induction that for i G {n,..., 0} the following holds: 


(Cl) -|(C3) ensure that 


sgn{Pa\i - e)) = sgn(p^*^(C - £)). 

For i = n, observe that G R. From (j^ it follows that sgn(pi”^(^)) = 

sgn(p^”^(C)) = Sn, and we can conclude that sgn(pL"^(^ — e)) = sgn(p^"^(( — e)). 
Let now k G {n—1,... ,0}, and assume that sgn{p^a^^\£, — s)) = sgn(p^^^^^(<^ — 
e)). We have to show that sgn(pi^^(^ — £)) = sgn(p^^^(^ — e)). We distinguish 
cases. If Sk yf 0, then (j^ ensures that sgn(pi^^(^)) = sgn(p^*^^(^)) = 0. 

If follows that sgn(pi^^(^ — £)) = sgn(p^*^^(^ — e)), because e is infinitesimal. 
Assume now that Sk = 0, and distinguish three cases: 

(a) sgii{pa\^ — e)) = 0: Since sgn(pi^^(^)) = Sji. = 0, and e is infinitesimal, 

is the zero polynomial. Thus, is the zero polynomial as well. 

The induction hypothesis and our assumption Sk = 0 yield that p^ ^ is 

(k) 

the zero polynomial as well. This means that p)^' is a constant polynomial. 
On the other hand, sgn(p^^^(^)) = s^, = 0. Therefore, p^*^^ is the zero 
polynomial, in particular sgn(p^^^(C — e)) = 0. 

(b) sgn(pa^(C ~ s)) = 1- Since e is positive and infinitesimal and pa^(C ~ ^) > 

Pa^(0, it follows that pa^ is decreasing at ^ — £. Therefore, we have 
sgn(pa~'~^\^ — e)) = —1. By the induction hypothesis, it follows that 
sgn(p^^''’^^(^ — e)) = —1. Therefore, is decreasing at C ~ Finally, 

our assumption Sk = 0 ensures that sgn(p^^^(C)) = = 0. Since e is 

infinitesimal, we have p^p\c, — e) > 0, i.e., sgn(p^^^(C — e)) = 1. 

(c) sgn(pi*^^(^ — s)) = Similar to (b). □ 
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Consider a parametric root {p, s), and let oi, ..., am G ffi be such that r(p, s) 
holds. By Lemma there exists a unique ^ G K such that (Ci) -[(C^ hold. We 
define the left sign of (p, s) as sgnl(p, s) = sgn(p(ai,..., am){f — &))• Similarly, 
the right sign of (p, s) is defined as sgnr(p, s) = sgn(p(ai,..., am)(C + ^))- This 
is well-defined by Lemma Notice that (Ci) ensures that both sgnl(p, s) and 
sgnr(p, s) cannot be zero. 

The left and the right sign of (p, s) can be computed as follows: 

1. Find ai, ..., am G R satisfying r(p, s). 

2. Compute an isolating interval ]/, r[ of the root ^ of p(q;i, ..., am) identified 
by s such that p(ai,..., am){l) 7 ^ 0 and p{ai ,..., am)i'r) 0. 

Then sgnl(p, s) = sgn(p(Q;i,.. .,am){l)) and sgnr(p, s) = sgn(p(ai,..., am){r)). 


3 Elimination Terms and Elimination Sets 


Let n G N\{0}, and let ip be an A-V-combination of atomic formulas {pi Qi 0}ig/, 
where pi G Z[pi,..., Pm][a^] and Qi G {=, 7 ^, <, >}. Assume that degpi ^ n 

for all i G I. We say that p is of degree at most n in x. In this section we are 
going to describe a method for eliminating from the formula 3xip. 

Our method is not self-contained. It depends on an algorithm A that is 
capable of eliminating a single existential quantifier from formulas of degree n 
in X, which have a very particular shape. We are going to describe these formulas 
along with the definition of virtual substitution of elimination terms. Later in 
Section we will show that it is even sufficient to consider only finitely many 
such formulas. Since the real numbers admit effective quantifier elimination, it 
is clear that such an algorithm A exists. The key challenge with the approach 
proposed here is going to be to find short quantifier-free equivalents, possibly 
including considerable human intelligence at least for post-processing. 

We start with the description of the set Ei of elimination terms generated 
by a particular atomic formula (pi Qi 0 ) in p: 


E^ = 


{{pi, s) I (pi, s) is a parametric root of pi} 
{(pi,s) + £ I {pi,s) is a parametric root of pi} 


if Qi G {—, 

if Qi G {yf, <, >}. 


Consider an atomic formula {q q 0), where q = bnX^ -I- • • • -I- bix -I- 60 G 
nvi ,... ,ym][x]. The virtual substitution {q q Q)[x // r] of an elimination term 
r = (p, s) for X into {q q 0) is the quantifier-free formula computed by A for 

|s| 

3x(^p = 0 A a(5i) 0) A{q g 0)^. 

2=1 


Let N and P be the sets of all sign sequences t consistent with q such that 
sgnr( 9 ,t) < 0 and sgnr(< 7 ,t) > 0, respectively. Furthermore, let be z/((p, s), {q,t)) 
the quantifier-free formula computed by A for 

W |t| 

3x(^p = 0 A A(A^ o-(si) 0) A g = 0 A cr{ti) 0)^ 

2 = 1 2=1 
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In these terms, the virtual substitution {q q Q)[x // r + e] of r+ e for x is defined 
as follows: 


{q = Q)[x//r + s\ : 
{q ^ 0)[a://r + e] : 
{q < Q)[x // r + e] : 

{q > G)[x // r + e] : 

{q ^ 0)[a;//r + e] : 
{q ^ Q)[x // r + e] : 


= 0 A • • • A 6o = 0 
fen 7^ 0 V • • • V 6o ^ 0 

{q<Q)[x//r\y \J v{{p,s),{q,t)) 

i^N 

(9>0)[x//r]V y i^{{p,s),{q,t)) 
teP 

{q < 0)[x // r + e]\/ {q = 0)[x // r + e] 

{q > G)[x // r + e\\J {q = Q)[x // r + e]. 


Note that, in contrast to mi Section 3], our definition of virtual substitution 
of r + e is not recursive. The deeply nested subformulas introduced with the 
recursive definition of v for quadratic quantifier elimination in m Section 3] 
are a considerable obstacle for simplification. A good choice of A might help to 
overcome this. 

Another somewhat special elimination term is —oo. It is not generated by 
any atomic formula, but will generally occur in every elimination set. The 
virtual substitution {q q{))[x // —oo] of —oo for x is defined as follows: 


(g = 0)[a://-oo] 
{q^Q)[x U-oo\ 
{q < 0)[a;//-oo] 
(g > 0)[x//-oo] 
(g 0)[a://-oo] 
(g ^ 0)[a://-oo] 


fe„ = 0 A • • • A feg = 0 
fen 7^ 0 V • • • V feo 7^ 0 
p<{q,n) V • • • V M<(g,0) 
p>{q,n) V • • • V ^>(g, 0) 

(g < 0) [a; // -oo] V (g = 0) [a; // -oo] 
(g > 0)[a://-oo] V (g = 0)[a;//-oo], 


where for k € {0,..., n} we define 

fj,^{q,k) ■ fe„ = 0 A • • • A fefc+i = 0 A (-l)'‘fefc < 0 
p>{q,k) ■ fe„ = 0 A • • • A fefc+i = 0 A (-l)''fefc > 0. 


As usual, the key idea of virtual substitution is to map not terms to terms, 
but atomic formulas to quantifier-free formulas, which gives us the freedom to 
describe its results in the Tarski language. That mapping on atomic formulas 
naturally induces virtual substitution on arbitrary quantifier-free formulas. 

In the sequel we prove that the terms generated by all atomic formulas 
occurring in p together with —oo constitute an elimination set E for 3xp in the 
following sense: 

K 1= 3xp <—> \J p[x U e]. 

eeE 

The following lemma is an immediate consequence of our definition of virtual 
substitution: 

Lemma 3. Let (g g 0) be an atomic formula, where g G Z[yi,... ,ym][x]. 
Consider a parametric root (p, s). Assign values oi, ..., am G K to the variables 
2 / 1 , ..., 2/m. Then the following hold: 
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(i) If {q qQ)[x // {p, s)] holds, then r(p, s) holds as well. 

(ii) If {q g 0)[x // {p,s) + e] holds, and g S {<, >}, then r(p, s) holds as well. 

□ 


Lemma 4. Consider {pk gu OjfcGK, where K is finite, pk G Z[yi,. .. ,ym][x], 
and gk G {=, <, >}. Assign values ai, ..., am S K to the variables yi, 

..., ym- Consider a parametric root (p, s). 

(i) There exists S M such that for all k G K the following holds: If {pk gk 
0 )[a: H (p, s)] holds, then -d satisfies {pk gk 0)- 


(ii) There exists C G ® such that for all k G K the following holds: If {pk gk 
ll)[x // {p,s) + e] holds, then ( satisfies {pk Pfc 0). 

Proof. To begin the proof of (i), note that if there is no k G K such that 
{Pk gk 0)[x H (p, s)] holds, there is nothing to prove. Assume w.l.o.g. that (pi gi 
0)[a; H (p, s)] holds. Lemma implies that r(p, s) holds as well. Consequently, 
Lemma ensures that there is a unique ^ S K such that |(Ci) - (C 3 ) hold. Let 
now k G K and assume that {pk gk 0)[x H (p, s)], i.e.. 


3x(^p = 0 A /\(p^*^ cr(si) 0) A {pk gk 0)j, 


2=1 


holds. The uniqueness of ^ satisfying conditions (Ci)f (C 3 ) now ensures that 
(Pfe gk 0) holds for This proves (i). 

To prove (ii) we first assume that there is some I G K such that (p; < 
0)[a; H {p,s) + e] or (p; > ll)[x // {p,s) + e] holds. Again, Lemma ensures that 
r(p, s) holds, and Lemma ensures that there is a unique ^ G M such that 
conditions |(Ci) - (C 3 ) hold. Pick ( from the open interval where 


= min{5 \ j G K A degpj > 0 A Pj{6) = 0 A S > ^}. 


Let now k G K, and assume that {pk gk 0)[a: // (p, s) + e] holds. If gk is “=,” 
then Pk is identically zero, so {pk = 0) trivially holds for If gk is “<,” then 
there are two cases to consider: 


(a) In the first case {pk <ll)[x // (p,s)] holds. Since ^ G K is unique satisfying 
conditions (Ci)f (C^ we deduce that {pk < 0) holds at f. The choice of 
C now guarantees that there is no root of pk in [^, C]i so we obtain that 
(pfc < 0 ) holds at as well. 


(b) In the second case 


|s| 


|t| 


3a:(^p = 0 A /\(p*'*^ cr(si) 0) Apfc = 0 A l\{p"k ^(ti) 0) 


holds for some t, and sgnr((p/j, t)) = —1. Again, from the uniqueness of 
^ G K satisfying (Ci)| - (C 3 ) we deduce that pk = 0 holds at f. Finally, 
since the right sign of {pk,t) is negative, and there is no root of pk in ]^, C], 
so we conclude that pk < 0 holds at 
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If Qk is then the proof is done similarly as for If is we apply 
the lemma either to {pk > ^)[x // {p, s) + e] or to {pk <Q)[x // {p, s) + e] to obtain 
that (pfc 0) holds for When g £ the proof is similar. 

To finish the proof of (ii), we assume that for every I £ K the formulas 
{pi < Q)[x // {p,s) + e] and (p; > Q)[x // (p,s) + e] do not hold. Let ^ be any 
real number. Let now k £ K, and assume that {pk gk ^)[x // {Pi~S) + e] holds. 
Our assumption together with the definition of [a; jj (p, s) + e] imply that (p^ gk 
0 )[a; H (p, s) + e\ is equivalent to (pfc = Q)\x jj (p,s) + s], which shows that {pk = 
0 ) holds for C- □ 


Lemma 5. Let (q g 0) be an atomic formula, where q £ Z[pi,... ,ym\[x], and 
g £ {=, 7 ^, <, ^, ^, >}. Consider a parametric root (p, s). Assign values oi, 
..., am € M to the variables pi, ..., Pm- Assume that r(p, s) holds, and denote 
the unique real number satisfying conditions (Ci)f (C 3 ) by Then the following 
hold: 


(i) If ^ satisfies {q gO), then {q gQ)[x // (p, s)] holds. 


(ii) Let G M be such that all C, £ satisfy {q g 0). Then {q g 

0 )[a: H (p, s) + e\ holds. 


Proof. Since {q g 0) holds for ^ G ffi, and ^ is 
we obtain that 


unique such that |(Ci)'- (C 3 ) hold. 


^p = 0 A (p(*^ cr(si) 0) A (q p 0)^ . 

i=l 


holds for By the definition of [x H (p,s)], we see that (9 g^)\x H (p, s)] holds. 
This proves (i). 

To prove (ii), we begin with the case when g is “=.” Since (g = 0) holds in 
a non-empty interval, q is the zero polynomial, so (g = Q)[x // (p^s) + e] follows. 
If g is “y^,” (g y^ 0) holds in a non-empty interval, so g is a non-zero polynomial. 
Therefore, (g y^ ^)[x // {p,s) + e] holds. If g is “<,” there are two possibilities. 
If (g < 0) holds at then by (i) we have that (g < Q)[x // (p, s)] holds, so 
(g < Q)[x // {p,s) + e] holds, as well. If (g < 0) does not hold for then (g = 0) 
holds for because (g < 0) holds for all ( £ Therefore, there is a Thom 

code t identifying ^ as a root of g, and the right sign of (g,t) is negative. This 
ensures that (g < 0) [x // (p, s) -I- e] holds in this case, as well. The proof for the 
case when g is “>” is similar. Finally, the cases g is or boil down to 
cases which we have just proven. Finally, we conclude that (ii) holds. □ 


Theorem 6 (Correctness of the Elimination Set). Consider a formula p of 
degree at most n in x, which is an A-V-combination of atomic formulas {pi gi 
0}ie/, where Pi £ 'L[yi,. ■ ■ ,Vm\[x], and gi £ {=,y^, <, ^, >, >}. Let Ei be the 
set of elimination terms generated by (pi gi 0) as described above. Then the 
following is an elimination set for 3xLp: 


E =\JEi\J {- 00 }. 
iGl 


Proof. We have to show that 

K 1= 3x(p i —)■ \J <p[x jj e]. 

eeE 
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Assign values a\, ..., am, € K to variables yi, ... ,ym- The sets Si CM. satisfying 
{Pi Qi 0)—and therefore also the set S' C R satisfying ip —are now finite unions 
of pairwise disjoint (closed, half-closed, open, semi-infinite, or infinite) intervals. 
We show that Vbgb H ^^olds if and only \i S ^ Since oi, ..., am are 
arbitrary real values, this will imply the theorem. 

First assume that Vegb H ^^olds. Thus, (f[x // e] holds for some e £ E. 
If ip[x // —oo] holds, then the set of values satisfying ip is unbounded from below, 
i.e., non-empty. 

Now suppose that ip[x // (p, s)] holds for some parametric root (p, s). By 
Lemma l^i), there exists'd G R such that for any i G / we have: (p^ Qi 0) holds 
for d whenever (p^ Qi 0)[a: // (p, s)] holds. The fact that p is an A-V-combination 
of atomic formulas ensures that p holds for -d. 

Assume that ip[x//{p,^) + e] holds for some parametric root (p, s). By 
Lemma Qii), there exists C G R such that for any i £ I we have: {pi Qi 0) 
holds for C whenever {pi Qi 0)[a; jj (p, s)] holds. Again, p is an A-V-combination 
of atomic formulas, so p holds for fy 

We continue by assuming that S is non-empty. To begin with, notice that if S 
is unbounded from below, then p[a; jj —oo] holds. In the following we therefore 
assume that S is bounded from below. Since 5 is a finite union of pairwise 
disjoint (closed, half-closed, open, semi-infinite, or infinite) intervals, there exists 
infimum ^ of S' such that ^ is a root of some polynomial occurring in p. There 
are two cases to consider. 

In the first case ^ G S. This implies that there is some * G / such that 
(Pi Qi 0) holds for fy and Qi G {=, ^}. Moreover, ^ is a root of pi with Thom 

code r. By the definition of Ei we conclude that {pi,f) G E. Now Lemma [^i) 
together with the fact that p is an A-V combination of atomic formulas ensure 
that p\x H (pi,r)] holds. 

In the second case ^ ^ S, so there is some i G I such that (p^ Qi 0), Qi G 
{fy, <, >}, holds for all C, G ]fyfy[, where 

fy = min{(j I j G / A degpj > 0 A pj(J) = 0 A S > ^}. 

Furthermore, ^ is a root of pi with Thom code r. By the definition of Ei we 
have (pi,f) + e G Ei. Now Lemma |^ii) together with the fact that p is an 
A-V combination of atomic formulas ensure that ip\x jj (j>i,r) + e] holds. This 
concludes the proof of the theorem. □ 

We conclude this section with Algorithm which eliminates a single exis¬ 
tential quantifier. We explicitly point to places where the external quantifier 
elimination algorithm A is used. The correctness of Algorithm [l] follows from 
Theorem 

4 Smaller Elimination Sets 

In this section we are going to considerably reduce the size of our elimination 
sets by generalizing a well-known idea from the linear quantifier elimination m 
to arbitrary degrees: An elimination term t is added to the elimination set for 
p only if t possibly represents a lower bound of a satisfying interval of p for 
some choice of parameters yi, ..., ym- 
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Algorithm 1: Elimination of 3x 


1 

2 

3 

4 

5 

6 
7 


Input: if 

(p is an A-V-combination of atomic formulas {pi pi 0)^ i G where 
Qi e {=,^,<,<,^,>1, and Pi G Z[yi,... ,yrn][x], with degpi ^ n. 

Output: ^ 

tjj is a quantifier-free formula equivalent to 3xip. 

foreach i G I do 

E , :=0 

foreach s G ({—1, 0,1}" \ {(0,..., 0)}) do 
Use A to compute r(pi,s). 
if r(pi,s) is satisfiable then 
if £1 G {=, >} then 

^ Ei := Ei U {(Pi,s)} 
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else 

^ Ei := Ei U {(pi,s) -I- e} 


10 Ip := false 

11 foreach e G ({—oo} U do 

12 Use A to compute p\x jj e\. 

13 tp := ipy p[x H e] 

14 return ip 


Consider a single atomic formula (p ^ 0), where p G Z[yi,... ,ym][x\. Let 
Oi, ..., am G M, and assume that the polynomial p(ai,..., am) is of positive 
degree and has a real root ^ G K. There are four possibilities how p(ai,..., am) 
can look in the neighborhood of all of which are pictured in Figure The 
corresponding satisfying sets of (p ^ 0) are shown in red. Observe that only 
in the second and the third case ^ is a lower bound of the respective satisfying 
interval of (p ^ 0), i.e., only when p(ai,..., Um) is positive on the left-hand side 
of fy Consequently, if p(q!i, ..., Um) is negative on the left-hand side of fy then 
there is either another root ^ smaller than fy or p(ai,..., am) holds at —oo. 

Similar ideas apply to all other relations, which motivates the following re¬ 
vised definition of the sets of elimination terms E[ generated by (pi Qi 0), where 
again {pi,~s) is a parametric root of pp. 


{pi 

= 0) 

{r r = 

{Pi 


{pi 

^0) 

{r + e 

r = 

{Pi,s) } 

{Pl 

<0) 

{r + e 

r = 

iPi,s) A sgnr(r) 

{Pr 

>0) 

{r + e 

r = 

(pi,s) A sgnr(r) 

{Pi 

/A 

o 

{ r r = 

{Pi 

s) A sgnl(r) = 1 

{Pt 

w 

o 

{ r r = 

{Pi 

s) A sgnl(r) = — 


Theorem 7 (Correctness of the Smaller Elimination Set). Theorem^remains 
correct for E[ instead of Ei. 
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Figure 1: p{ai ,..., a^) near its root ^ 


Proof. We have to show that 

K 1= 3x(p <—> \J ip[x U e]. 

eG_E 

We proceed similarly as in the proof of Theorem]^ Assign values oi, ..., G 
M to variables yi, ym, respectively. Again, the sets Si C R satisfying 
{pi Qi 0) and also the set 5" C M satisfying p are finite unions of pairwise 
disjoint (closed, half-closed, open, semi-infinite, or infinite) intervals. We show 
that VeGS H ^olds if and only if ^ yf 0. This will imply the theorem. 

If VeGB H holds, the proof of the fact that S' 0 is exactly the same 
as in the proof of Theorem 

Assume that S is non-empty. To begin with, notice that if S is unbounded 
from below, then p[x H —oo] holds. In the following we therefore assume that 
S is bounded from below. Since S is a finite union of pairwise disjoint (closed, 
half-closed, open, semi-infinite, or infinite) intervals, there exists infimum f of 
S such that ^ is a root of some polynomial occurring in p. There are two cases 
to consider. 

In the first case £, G S. Define the following sets of indices: 

h = {A: G / I gfe is “=” A degp/c > 0 Apfc(C) = 0}, 

h = {A: G / I £ife is A degp/c > 0 Apfc(^) = 0}, 

I 3 = {A: G / I is Adegpfe > 0 Apfc(C) = 0}. 

Since ^ G S', we have (Ji U /2 U I 3 ) yf 0. 

If /i yf 0, then there exists i G I such that ^ is a root of Pi with Thom 
code s. By the definition of A', it follows that {pi,f) G E. Now Lemma [^i) 
together with the fact that p is an A-V combination of atomic formulas ensure 
that p[x // (pi,s)] holds. 

Now assume that Ii = 0. We show that there is either some i G I 2 such that 
Pi is positive at ^ — e, or some j G I 3 such that pj is negative at ^ — e. Assume 
the opposite, i.e., for every A: G /2 U I 3 , the atomic formula {pk Qk 0) holds at 


11 






^ — e. Let ( G where 


= max{(5 I / G / A degp; > 0 A pi{S) = 0 A 5 < ^}. 

Since Ii = 0, the following implication holds for all to G /: If {pm Q 0) holds for 
then it holds for C,. This together with the fact that p is an A-V-combination 
of atoms implies that p holds for a contradiction. Therefore, there is either 
i G I2 such that pi is positive for ^ — e, or j G I3 such that pj is negative for 
^ — e. In the first case ^ is a root of pi with Thom code s, so the definition 
of El ensures that {pi,s) G if'. Now, Lemma |^i) together with the fact that 
p is an A-V combination of atoms ensure that p[x // {pi,t)\ holds. Finally, in 
the second case ^ is a root of pj with Thom code r, so the definition of Ej 
ensures that {pj,r) G Ej. Again, Lemma ^i) together with the fact that p is 
an A-V-combination of atoms ensure that jj {pj,f)] holds. 

We continue by assuming that ^ ^ S. Define the following sets of indices: 

I4 = {A: G / I is “yf” Adegpfe > 0 Apfc(C) = 0}, 

h = {A: G / I is “<” A degpfe > 0 Apfc(^) = 0}, 

h = {A: G / I is “>” A degpfe > 0 Apfc(^) = 0}. 

Since ^ ^ S' it follows that {I 4 U Iq) yf 0. Define 

= min{5 I A: G / A degp^ > 0 A Pk{S) = 0 A <5 > ^}. 

If I4 yf 0, then there exists i G I such that {pi qi 0) holds for all Q G 
Moreover, ^ is a root of pi with Thom code s. By the definition of if', it follows 
that (pi, s) -I- £ G E. Now Lemma |^ii) together with the fact that p is an A-V 
combination of atomic formulas ensure that p[x jj {pi,s)] holds. 

Now assume that I4 = (h. We show that there is either some i G I5 such that 
Pi is negative at ^-|-£ or some j G such that pj is positive at ^-|-£. Assume the 
opposite, i.e., for every k G I5U le, the atomic formula {pk Qk 0) does not hold 
at ^ -I- £. Since 14 = 0, the following implication holds for all to G /: If (pm Q 0) 
holds in ]^,^'[, then it holds for This together with the fact that p is an 
A-V-combination of atomic formulas ensure that p holds for a contradiction. 
Therefore, there is either i G h such that pi is negative at ^ -I- £ or some j G Iq 
such that Pj is positive at ^ -|- £. In the first case ^ is a root of pi with Thom 
code s, so the definition of if' ensures that {pi,s) + e G El. Now Lemma iii) 
together with the fact that p is an A-V-combination of atoms guarantee that 
p[x // {pi,s) + e] holds. In the second case ^ is a root of pj with Thom code f, so 
the definition of Ej ensures that (pj,r) + e G Ej. Again, Lemma l^ii) together 
with the fact that p is an A-V-combination of atoms ensure that p\x jj {pj , r) -|-£] 
holds. This finishes the proof of the theorem. □ 

Theorem ensures the correctness of Algorithm which employs the idea 
of smaller elimination sets. 


5 Relation to Other Work 

The idea to use Thom’s lemma as a basis for a virtual substitution-based quan¬ 
tifier elimination method originally appeared as an outlook in Weispfenning’s 
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Algorithm 2: Elimination of 3x (smaller elimination sets) 


1 

2 

3 

4 

5 

6 

7 

8 
9 


Input: (f 

ip is an A-V-combination of atomic formulas {pi 0), z € /, where 
Qi e {=,^,<,<,^,>1, and Pi G Z[yi,... ,ym\[x\, with degpi ^ n. 

Output: ^ 

Ip is a, quantifier-free formula equivalent to 3xip. 

foreach t G / do 

E[ ■- 0 

foreach s G ({—1, 0,1}" \ {(0,..., 0)}) do 
Use A to compute r(pi,s). 
if r(pi,s) is satisfiable then 
if Qi is “= ” then 
L i?':=if'U{(p„s)} 
if Qi is ” then 
L E[:=E'U{ip,,s)+e} 


10 

11 


if Pi is “< ” and sgnr((pj, 5 )) = —1 then 

L ^ 


12 

13 

14 

15 

16 
17 


if Qi is ” and sgnr((pj, 5)) 

L ■— ^ 


if Qi is and sgnl{{pi,s)) 

I Ei:=ElU{ip,A)} 


if Qi is and sgn\{{pi,s)) 
I Ei-.= E[\j{{p,,s)} 


1 then 
1 then 
— 1 then 


18 Ip := false 

19 foreach e G ({— 00 } U Ue/^^0 do 

20 Use A to compute p\x jj e\. 

21 Ip := ipy p[x H e] 

22 return ip 


article on the quadratic case m- Weispfenning, too, used an external quanti¬ 
fier elimination algorithm A for realizing the virtual substitution of elimination 
terms. Besides being way more explicit, there are some principal differences and 
novelties in our framework developed here. 

The most important difference is the length of the sign sequences s in para¬ 
metric roots (p, s), where p G Zlyi,... ,ym][x] is of degree n. Weispfenning’s 
sequences are of length n — 1, while our framework uses sequences of length n. 
This implies that s imposes stronger restrictions on the graph of the univari¬ 
ate polynomial p{ai,... ,am) after fixing parameters around the correspond¬ 
ing root, which we take advantage of to a considerable extent. For instance, 
Lemma would not hold when using sequences of length n — 1. It follows that 
our notions of the left and the right sign make sense only when using sequences 
of length n, which is crucial for the correctness of our optimized elimination sets 
described in Section IH 

Weispfenning partitions his sign sequences into maximally consistent sets. 


13 









This requires the computation of a case distinction on the number of real roots of 
p. Our formulation of the Theorem]^ and Theoremclearly exhibits that such 
a case distinction is not necessary. The deeper reason for this is our following 
insight: Given n S N \ {0} there is p G '^[yi, ■ ■ ■ ,ym\[x], where degp = n < m 
such that all 3" — 1 sign sequences (excluding the zero sequence) are consistent 
with p, and therefore need be included in the elimination sets. 

Independently, Weispfenning very explicitly discussed the cubic case in [26j . 
This treatment does not rely on an external algorithm A. However, it also does 
not use Thom codes at all, but relies on a thorough analysis and case distinction 
on the real type of the relevant, at most cubic, polynomials. As a matter of fact, 
many ideas from that work could be combined with our framework introduced 
here, either directly or for realizing A. 

Our framework is compatible with various generalizations of real quantifier 
elimination by virtual substitution. Positive quantifier elimination focuses on 
the special case where all variables are known to be strictly positive mills]. 
It is straightforward to adjust our framework so that this assumption is taken 
into account during the construction of elimination sets, decreasing their size. 
Furthermore, the external algorithm A could take advantage of this assumption, 
possibly constructing shorter quantifier-free formulas. 

Extended quantifier elimination keeps track of the elimination terms used 
and generates parametric sample solutions for x guarded by quantifier-free con¬ 
ditions mi HHj. The disjunction over these conditions is actually the regu¬ 
lar quantifier elimination result. For details we refer the reader to our recent 
work M- There we show for fixed choices of parameters how to use post¬ 
processing to eliminate nonstandard symbols, like —oo and e, from the sample 
solutions. Both extended quantifier elimination and our postprocessing are com¬ 
patible with our proposed framework. 

Generic quantifier elimination makes global assumptions on non-vanishing 
of parametric expressions during the elimination process. The result is correct 
only under these assumptions, which form part of the output. This saves case 
distinctions, which considerably increases efficiency and reduces the overall size 
of the output [ISIIIOI. In our framework we could assume that certain derivatives 
do not vanish, which would further decrease the size of the elimination sets. 

6 Towards Practical Computations 

Our theoretical discussion in Sectionand Section]^ uses the external algorithm 
A online during the computation of r(p, s), as well as during virtual substitu¬ 
tion. However, it is a key idea of our framework to use in practice an offline 
approach. This is based on the following observation, which is not hard to see: 

Proposition 8 (Finiteness Property). Let n G N \ {0}. Then our framework 
requires only finitely many formulas to be computed by A to realize quantifier 
elimination for all formulas of degree at most n. □ 

These finitely many formulas are essentially r(p, s), {q g f)[x // (_p, s)], and 
v{{p, s), (r, t)) for generic p = -I- • • • -I- Uq, q = -I- • • • -I- Uq, and for all 

possible choices of g, s, and t. Then, calls to A in our theoretical description 
can be replaced by substitutions into the Ui and vj. 
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Practical experiments have shown that formulas computed this way using, 
e.g., Qepcad [1] allow to generate such formulas for n = 2. However, using these 
results our framework cannot compete with the classical approach from m- 
Having computed part of the formulas for n = 3, we assume that Qepcad [1] is 
going to fail for efficiency reasons at n = 4 latest. Our vision is that researchers 
would create suitable sets of formulas for given degrees n combining automated 
methods with human intelligence. This can even lead to formulas of optimal size, 
as hazard has demonstrated with his famous result on the quartic problem m- 
This way, independent research results in symbolic computation could push 
the limits of practically applicable quantifier elimination by virtual substitution 
towards increasingly higher degrees n. 
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